Lead Security Compliance Engineer

Brak informacji o wynagrodzeniu

SeniorZdalnie·ŁódźFull-time

#464191·Dodano 4 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Security ComplianceHipaaFedRAMPNIST 800-53SOC 2Identity and Access ManagementAzure DevOpsAzure

Podsumowanie oferty

Lead security compliance engineering across HIPAA, FedRAMP, and NIST 800-53 programs. Translate regulatory requirements and audit findings into engineering work, verify controls, and support audit readiness using Azure DevOps.

Wymagania

3+ years of experience in security/privacy compliance, GRC, or compliance engineering, supporting HIPAA and/or FedRAMP/NIST 800-53 programs.
Solid working knowledge of HIPAA Security and Privacy Rules, including administrative, physical, and technical safeguards, BAAs, breach notification, and minimum necessary standards.
Knowledge of NIST 800-53 control families, including AC, AU, SI, and PM.
Ability to translate compliance and regulatory language into scoped, estimable engineering backlog items using Azure DevOps, Jira, or similar tools.
Direct experience supporting third-party audits such as SOC 2, FedRAMP, or HITRUST, including evidence collection, control-to-evidence mapping, and meeting auditor deadlines.
Familiarity with cloud environments such as AWS GovCloud and/or Azure Government.
Understanding of compliance controls, including IAM/RBAC, encryption/KMS, audit logging, and data retention and deletion.
English proficiency at B2 level or higher.

Nice to have:

Direct experience with FedRAMP Significant Change Requests (SCR) and assessor engagements.
Scripting/automation skills using Python or Bash to automate evidence collection, control testing, or compliance dashboards.
Experience with AWS IAM/identity governance tooling such as SailPoint or equivalent, and access policy management across S3, RDS, DynamoDB, and Redshift.
Exposure to international privacy regimes such as UK/EU GDPR, Australia Privacy Act, or Canada PIPEDA, or readiness to ramp quickly as coverage expands.
Relevant certifications: CIPP/US, CIPM, HCISPP, CISA, CISSP, or an AWS/Azure security certification.
Experience with security-scan remediation tracking tools such as Snyk, Wiz, Qualys, and Burp, and secrets/certificate rotation programs.
Background supporting legal-tech, healthcare, or government SaaS products handling regulated data.

Obowiązki

Convert HIPAA gap analyses, NIST 800-53 privacy controls, and audit findings into scoped Azure DevOps Features, Stories, and Tasks with acceptance criteria, effort estimates, and an owner.
Maintain backlog hygiene across compliance features covering access control, data classification, log scrubbing, audit logging, data retention and deletion, and data access restrictions.
Close ownership and sprint-assignment gaps before they escalate into RAID-log risks.
Write and execute test cases to verify controls, including privileged-access restrictions, time-bound SailPoint access, PII minimization, and deletion on request.
Document pass/fail evidence for control testing activities.
Own intake, tracking, and fulfillment of third-party auditor evidence requests, including Schellman FedRAMP Significant Change Reviews.
Map auditor requests to relevant NIST 800-53 controls and coordinate with engineering, ISRM, Privacy, and Legal to gather artifacts.
Deliver evidence and documentation on the auditor’s schedule.
Produce recurring compliance status reporting for stakeholders.
Build lightweight automation, including scripts, dashboards, and evidence pipelines, to reduce manual effort in future audit cycles.
Partner with ISRM, Privacy Office, Legal, SRE, and cloud platform teams to document controls inherited from AWS/Azure and controls that must be built or owned internally.

Benefity

Career development programs.
Thought leadership, mentoring, soft skills, and well-being programs.
Certification opportunities for Anthropic, Gemini, GCP, Azure, and AWS.
English classes.
Participation in the Employee Stock Purchase Plan with a 15% discount.
Benefits package including health insurance, multisport, and shopping vouchers.
Referral bonuses up to $2,000.
Offices with entertainment and relaxation zones, table tennis, football, free snacks, and coffee.
Corporate, social, and well-being events.
Business-driven relocation opportunities.

Pakiet relokacyjny

Kursy językowe

Ubezpieczenie

Karta sportowa

Udziały pracownicze

Premie

Spotkania integracyjne

Darmowe przekąski

Napoje w biurze

Inne informacje

Remote work is available within Poland.
Opportunity to work abroad for up to 60 days annually.

EPAM Systems

1552 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz